Stefan wrote:
> Am Sonntag, 9. August 2009 07:36:54 schrieb Luis Daniel Lucio Quiroz:
>> Hi SAs,
>>
>> Well, after reading this link
>> http://spamassassin.apache.org/full/3.2.x/doc/sa-learn.html I'm still
>> looking for an easy-way to let my mortal users to train our antispam.  I
>> was thinking a mailbox such as  h...@antispamserver and s...@antispamserver
>> to let users to forward their false positivos or their false netgatives. 
>> In isde each box (ham or spam), of course a procmail with sa-learn input
>> will be forwarded.
>>
>> My doubts are nexts:
>> 1. Will forwarded mails be usefull for training, I mean if spam was: From:
>> spa...@example.net    To: u...@mydomain,   when forwarding it will be From:
>> mu...@mydomain To: s...@antispamserver.   Change of this and forwarding
>> (getting rid of headers because mail-clients) wont change learning?
> 
> You have to forward the message as an attachment un unpack it after 
> receiving. 
> Have a look at: 
> https://po2.uni-stuttgart.de/~rusjako/sal-wrapper

Yes, I find this approach works well.  It's the simplest way for me to
train Bayes, and most users can cope with it, providing they're not
using Outlook 2003/XP which can't forward as an attachment.  But
Thunderbird, Outlook Express, Squirrelmail and Pine all can easily.
It's not as simple as a 'This Is Spam' button perhaps, and that's a
*good* thing.  Requiring a little bit of thought stops people using it
as an alternative to the delete key for 'OK, perhaps I did subscribe to
this but I don't want it now'.

My script is very similar to sal-wrapper, using Postfix
check_recipient_access to ensure only authenticated users can send to
the reporting address; triggered from procmail; using MIME::Parser to
extract (possibly multiple) message/rf822 attachments; feed through
sa-learn --ham or spamassassin -r as appropriate and send an
acknowledgement back to the user, to remind them to also send
spam/non-spam to the corresponding address and correct any mistakes.

One thing I notice from sal-wrapper however is that it pipes the header
and body to sa-learn without passing a file as parameter.  I found that
although sa-learn didn't complain, this didn't work at all well, and
quite short ham messages were scoring BAYES_99.  You can pipe to
spamassassin -r just like you can to spamassassin in any other mode, but
I think if you pipe to sa-learn, you need to do it as
   sa-learn --ham -

with the '-' as parameter, so it reads the standard input.
Alternatively feed it a temporary message file.  Or am I misreading
something?

CK

Reply via email to